aws-cdk-lib 2.176.0__py3-none-any.whl → 2.177.0__py3-none-any.whl

aws_cdk/aws_gamelift/__init__.py

@@ -8389,8 +8389,8 @@ class CfnGameSessionQueue(
 
             Changing the priority order will affect how game sessions are placed.
 
-            :param location_order: The prioritization order to use for fleet locations, when the ``PriorityOrder`` property includes ``LOCATION`` . Locations are identified by AWS Region codes such as ``us-west-2`` . Each location can only be listed once.
-            :param priority_order: The recommended sequence to use when prioritizing where to place new game sessions. Each type can only be listed once. - ``LATENCY`` -- FleetIQ prioritizes locations where the average player latency (provided in each game session request) is lowest. - ``COST`` -- FleetIQ prioritizes destinations with the lowest current hosting costs. Cost is evaluated based on the location, instance type, and fleet type (Spot or On-Demand) for each destination in the queue. - ``DESTINATION`` -- FleetIQ prioritizes based on the order that destinations are listed in the queue configuration. - ``LOCATION`` -- FleetIQ prioritizes based on the provided order of locations, as defined in ``LocationOrder`` .
+            :param location_order: The prioritization order to use for fleet locations, when the ``PriorityOrder`` property includes ``LOCATION`` . Locations can include AWS Region codes (such as ``us-west-2`` ), local zones, and custom locations (for Anywhere fleets). Each location must be listed only once. For details, see `Amazon GameLift service locations. <https://docs.aws.amazon.com/gamelift/latest/developerguide/gamelift-regions.html>`_
+            :param priority_order: A custom sequence to use when prioritizing where to place new game sessions. Each priority type is listed once. - ``LATENCY`` -- Amazon GameLift prioritizes locations where the average player latency is lowest. Player latency data is provided in each game session placement request. - ``COST`` -- Amazon GameLift prioritizes destinations with the lowest current hosting costs. Cost is evaluated based on the location, instance type, and fleet type (Spot or On-Demand) of each destination in the queue. - ``DESTINATION`` -- Amazon GameLift prioritizes based on the list order of destinations in the queue configuration. - ``LOCATION`` -- Amazon GameLift prioritizes based on the provided order of locations, as defined in ``LocationOrder`` .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-gamelift-gamesessionqueue-priorityconfiguration.html
             :exampleMetadata: fixture=_generated
@@ -8420,7 +8420,7 @@ class CfnGameSessionQueue(
         def location_order(self) -> typing.Optional[typing.List[builtins.str]]:
             '''The prioritization order to use for fleet locations, when the ``PriorityOrder`` property includes ``LOCATION`` .
 
-            Locations are identified by AWS Region codes such as ``us-west-2`` . Each location can only be listed once.
+            Locations can include AWS Region codes (such as ``us-west-2`` ), local zones, and custom locations (for Anywhere fleets). Each location must be listed only once. For details, see `Amazon GameLift service locations. <https://docs.aws.amazon.com/gamelift/latest/developerguide/gamelift-regions.html>`_
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-gamelift-gamesessionqueue-priorityconfiguration.html#cfn-gamelift-gamesessionqueue-priorityconfiguration-locationorder
             '''
@@ -8429,14 +8429,12 @@ class CfnGameSessionQueue(
 
         @builtins.property
         def priority_order(self) -> typing.Optional[typing.List[builtins.str]]:
-            '''The recommended sequence to use when prioritizing where to place new game sessions.
+            '''A custom sequence to use when prioritizing where to place new game sessions. Each priority type is listed once.
 
-            Each type can only be listed once.
-
-            - ``LATENCY`` -- FleetIQ prioritizes locations where the average player latency (provided in each game session request) is lowest.
-            - ``COST`` -- FleetIQ prioritizes destinations with the lowest current hosting costs. Cost is evaluated based on the location, instance type, and fleet type (Spot or On-Demand) for each destination in the queue.
-            - ``DESTINATION`` -- FleetIQ prioritizes based on the order that destinations are listed in the queue configuration.
-            - ``LOCATION`` -- FleetIQ prioritizes based on the provided order of locations, as defined in ``LocationOrder`` .
+            - ``LATENCY`` -- Amazon GameLift prioritizes locations where the average player latency is lowest. Player latency data is provided in each game session placement request.
+            - ``COST`` -- Amazon GameLift prioritizes destinations with the lowest current hosting costs. Cost is evaluated based on the location, instance type, and fleet type (Spot or On-Demand) of each destination in the queue.
+            - ``DESTINATION`` -- Amazon GameLift prioritizes based on the list order of destinations in the queue configuration.
+            - ``LOCATION`` -- Amazon GameLift prioritizes based on the provided order of locations, as defined in ``LocationOrder`` .
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-gamelift-gamesessionqueue-priorityconfiguration.html#cfn-gamelift-gamesessionqueue-priorityconfiguration-priorityorder
             '''

aws_cdk/aws_iam/__init__.py

@@ -724,6 +724,14 @@ thumbprint of the root certificate authority (CA) will automatically be obtained
 from the host as described
 [here](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_create_oidc_verify-thumbprint.html).
 
+Byy default, the custom resource enforces strict security practices by rejecting
+any unauthorized connections when downloading CA thumbprints from the issuer URL.
+If you need to connect to an unauthorized OIDC identity provider and understand the
+implications, you can disable this behavior by setting the feature flag
+`IAM_OIDC_REJECT_UNAUTHORIZED_CONNECTIONS` to `false` in your `cdk.context.json`
+or `cdk.json`. Visit [CDK Feature Flag](https://docs.aws.amazon.com/cdk/v2/guide/featureflags.html)
+for more information on how to configure feature flags.
+
 Once you define an OpenID connect provider, you can use it with AWS services
 that expect an IAM OIDC provider. For example, when you define an [Amazon
 Cognito identity

aws_cdk/aws_imagebuilder/__init__.py

@@ -3789,7 +3789,7 @@ class CfnImage(
             You must have at least one build component to create a recipe, but test components are not required. If you have added tests, they run after the image is created, to ensure that the target image is functional and can be used reliably for launching Amazon EC2 instances.
 
             :param image_tests_enabled: Determines if tests should run after building the image. Image Builder defaults to enable tests to run following the image build, before image distribution.
-            :param timeout_minutes: The maximum time in minutes that tests are permitted to run. .. epigraph:: The timeout attribute is not currently active. This value is ignored.
+            :param timeout_minutes: The maximum time in minutes that tests are permitted to run. .. epigraph:: The timeout property is not currently active. This value is ignored.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-imagebuilder-image-imagetestsconfiguration.html
             :exampleMetadata: fixture=_generated
@@ -3834,7 +3834,7 @@ class CfnImage(
 
             .. epigraph::
 
-               The timeout attribute is not currently active. This value is ignored.
+               The timeout property is not currently active. This value is ignored.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-imagebuilder-image-imagetestsconfiguration.html#cfn-imagebuilder-image-imagetestsconfiguration-timeoutminutes
             '''
@@ -4609,7 +4609,7 @@ class CfnImagePipeline(
             You must have at least one build component to create a recipe, but test components are not required. Your pipeline runs tests after it builds the image, to ensure that the target image is functional and can be used reliably for launching Amazon EC2 instances.
 
             :param image_tests_enabled: Defines if tests should be executed when building this image. For example, ``true`` or ``false`` .
-            :param timeout_minutes: The maximum time in minutes that tests are permitted to run. .. epigraph:: The timeout attribute is not currently active. This value is ignored.
+            :param timeout_minutes: The maximum time in minutes that tests are permitted to run. .. epigraph:: The timeout property is not currently active. This value is ignored.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-imagebuilder-imagepipeline-imagetestsconfiguration.html
             :exampleMetadata: fixture=_generated
@@ -4654,7 +4654,7 @@ class CfnImagePipeline(
 
             .. epigraph::
 
-               The timeout attribute is not currently active. This value is ignored.
+               The timeout property is not currently active. This value is ignored.
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-imagebuilder-imagepipeline-imagetestsconfiguration.html#cfn-imagebuilder-imagepipeline-imagetestsconfiguration-timeoutminutes
             '''
@@ -6597,9 +6597,9 @@ class CfnInfrastructureConfiguration(
     metaclass=jsii.JSIIMeta,
     jsii_type="aws-cdk-lib.aws_imagebuilder.CfnInfrastructureConfiguration",
 ):
-    '''The infrastructure configuration allows you to specify the infrastructure within which to build and test your image.
+    '''Creates a new infrastructure configuration.
 
-    In the infrastructure configuration, you can specify instance types, subnets, and security groups to associate with your instance. You can also associate an Amazon EC2 key pair with the instance used to build your image. This allows you to log on to your instance to troubleshoot if your build fails and you set terminateInstanceOnFailure to false.
+    An infrastructure configuration defines the environment in which your image will be built and tested.
 
     :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-infrastructureconfiguration.html
     :cloudformationResource: AWS::ImageBuilder::InfrastructureConfiguration
@@ -6671,20 +6671,20 @@ class CfnInfrastructureConfiguration(
         '''
         :param scope: Scope in which this resource is defined.
         :param id: Construct identifier for this resource (unique in its scope).
-        :param instance_profile_name: The instance profile of the infrastructure configuration.
+        :param instance_profile_name: The instance profile to associate with the instance used to customize your Amazon EC2 AMI.
         :param name: The name of the infrastructure configuration.
         :param description: The description of the infrastructure configuration.
-        :param instance_metadata_options: The instance metadata option settings for the infrastructure configuration.
-        :param instance_types: The instance types of the infrastructure configuration.
-        :param key_pair: The Amazon EC2 key pair of the infrastructure configuration.
-        :param logging: The logging configuration defines where Image Builder uploads your logs.
+        :param instance_metadata_options: The instance metadata options that you can set for the HTTP requests that pipeline builds use to launch EC2 build and test instances.
+        :param instance_types: The instance types of the infrastructure configuration. You can specify one or more instance types to use for this build. The service will pick one of these instance types based on availability.
+        :param key_pair: The key pair of the infrastructure configuration. You can use this to log on to and debug the instance used to create your image.
+        :param logging: The logging configuration of the infrastructure configuration.
         :param placement: The instance placement settings that define where the instances that are launched from your image will run.
-        :param resource_tags: The tags attached to the resource created by Image Builder.
-        :param security_group_ids: The security group IDs of the infrastructure configuration.
-        :param sns_topic_arn: The Amazon Resource Name (ARN) of the SNS topic for the infrastructure configuration.
-        :param subnet_id: The subnet ID of the infrastructure configuration.
-        :param tags: The tags of the infrastructure configuration.
-        :param terminate_instance_on_failure: The terminate instance on failure configuration of the infrastructure configuration.
+        :param resource_tags: The metadata tags to assign to the Amazon EC2 instance that Image Builder launches during the build process. Tags are formatted as key value pairs.
+        :param security_group_ids: The security group IDs to associate with the instance used to customize your Amazon EC2 AMI.
+        :param sns_topic_arn: The Amazon Resource Name (ARN) for the SNS topic to which we send image build event notifications. .. epigraph:: EC2 Image Builder is unable to send notifications to SNS topics that are encrypted using keys from other accounts. The key that is used to encrypt the SNS topic must reside in the account that the Image Builder service runs under.
+        :param subnet_id: The subnet ID in which to place the instance used to customize your Amazon EC2 AMI.
+        :param tags: The metadata tags to assign to the infrastructure configuration resource that Image Builder creates as output. Tags are formatted as key value pairs.
+        :param terminate_instance_on_failure: The terminate instance on failure setting of the infrastructure configuration. Set to false if you want Image Builder to retain the instance used to configure your AMI if the build or test phase of your workflow fails.
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__8df8a03094d1fe92963a315a657a78657df102ba9fbe66eda2c26bb8eac04479)
@@ -6773,7 +6773,7 @@ class CfnInfrastructureConfiguration(
     @builtins.property
     @jsii.member(jsii_name="instanceProfileName")
     def instance_profile_name(self) -> builtins.str:
-        '''The instance profile of the infrastructure configuration.'''
+        '''The instance profile to associate with the instance used to customize your Amazon EC2 AMI.'''
         return typing.cast(builtins.str, jsii.get(self, "instanceProfileName"))
 
     @instance_profile_name.setter
@@ -6814,7 +6814,7 @@ class CfnInfrastructureConfiguration(
     def instance_metadata_options(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnInfrastructureConfiguration.InstanceMetadataOptionsProperty"]]:
-        '''The instance metadata option settings for the infrastructure configuration.'''
+        '''The instance metadata options that you can set for the HTTP requests that pipeline builds use to launch EC2 build and test instances.'''
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnInfrastructureConfiguration.InstanceMetadataOptionsProperty"]], jsii.get(self, "instanceMetadataOptions"))
 
     @instance_metadata_options.setter
@@ -6843,7 +6843,7 @@ class CfnInfrastructureConfiguration(
     @builtins.property
     @jsii.member(jsii_name="keyPair")
     def key_pair(self) -> typing.Optional[builtins.str]:
-        '''The Amazon EC2 key pair of the infrastructure configuration.'''
+        '''The key pair of the infrastructure configuration.'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "keyPair"))
 
     @key_pair.setter
@@ -6858,7 +6858,7 @@ class CfnInfrastructureConfiguration(
     def logging(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnInfrastructureConfiguration.LoggingProperty"]]:
-        '''The logging configuration defines where Image Builder uploads your logs.'''
+        '''The logging configuration of the infrastructure configuration.'''
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnInfrastructureConfiguration.LoggingProperty"]], jsii.get(self, "logging"))
 
     @logging.setter
@@ -6894,7 +6894,7 @@ class CfnInfrastructureConfiguration(
     def resource_tags(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]]:
-        '''The tags attached to the resource created by Image Builder.'''
+        '''The metadata tags to assign to the Amazon EC2 instance that Image Builder launches during the build process.'''
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]], jsii.get(self, "resourceTags"))
 
     @resource_tags.setter
@@ -6910,7 +6910,7 @@ class CfnInfrastructureConfiguration(
     @builtins.property
     @jsii.member(jsii_name="securityGroupIds")
     def security_group_ids(self) -> typing.Optional[typing.List[builtins.str]]:
-        '''The security group IDs of the infrastructure configuration.'''
+        '''The security group IDs to associate with the instance used to customize your Amazon EC2 AMI.'''
         return typing.cast(typing.Optional[typing.List[builtins.str]], jsii.get(self, "securityGroupIds"))
 
     @security_group_ids.setter
@@ -6926,7 +6926,7 @@ class CfnInfrastructureConfiguration(
     @builtins.property
     @jsii.member(jsii_name="snsTopicArn")
     def sns_topic_arn(self) -> typing.Optional[builtins.str]:
-        '''The Amazon Resource Name (ARN) of the SNS topic for the infrastructure configuration.'''
+        '''The Amazon Resource Name (ARN) for the SNS topic to which we send image build event notifications.'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "snsTopicArn"))
 
     @sns_topic_arn.setter
@@ -6939,7 +6939,7 @@ class CfnInfrastructureConfiguration(
     @builtins.property
     @jsii.member(jsii_name="subnetId")
     def subnet_id(self) -> typing.Optional[builtins.str]:
-        '''The subnet ID of the infrastructure configuration.'''
+        '''The subnet ID in which to place the instance used to customize your Amazon EC2 AMI.'''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "subnetId"))
 
     @subnet_id.setter
@@ -6952,7 +6952,7 @@ class CfnInfrastructureConfiguration(
     @builtins.property
     @jsii.member(jsii_name="tagsRaw")
     def tags_raw(self) -> typing.Optional[typing.Mapping[builtins.str, builtins.str]]:
-        '''The tags of the infrastructure configuration.'''
+        '''The metadata tags to assign to the infrastructure configuration resource that Image Builder creates as output.'''
         return typing.cast(typing.Optional[typing.Mapping[builtins.str, builtins.str]], jsii.get(self, "tagsRaw"))
 
     @tags_raw.setter
@@ -6970,7 +6970,7 @@ class CfnInfrastructureConfiguration(
     def terminate_instance_on_failure(
         self,
     ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
-        '''The terminate instance on failure configuration of the infrastructure configuration.'''
+        '''The terminate instance on failure setting of the infrastructure configuration.'''
         return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], jsii.get(self, "terminateInstanceOnFailure"))
 
     @terminate_instance_on_failure.setter
@@ -7357,20 +7357,20 @@ class CfnInfrastructureConfigurationProps:
     ) -> None:
         '''Properties for defining a ``CfnInfrastructureConfiguration``.
 
-        :param instance_profile_name: The instance profile of the infrastructure configuration.
+        :param instance_profile_name: The instance profile to associate with the instance used to customize your Amazon EC2 AMI.
         :param name: The name of the infrastructure configuration.
         :param description: The description of the infrastructure configuration.
-        :param instance_metadata_options: The instance metadata option settings for the infrastructure configuration.
-        :param instance_types: The instance types of the infrastructure configuration.
-        :param key_pair: The Amazon EC2 key pair of the infrastructure configuration.
-        :param logging: The logging configuration defines where Image Builder uploads your logs.
+        :param instance_metadata_options: The instance metadata options that you can set for the HTTP requests that pipeline builds use to launch EC2 build and test instances.
+        :param instance_types: The instance types of the infrastructure configuration. You can specify one or more instance types to use for this build. The service will pick one of these instance types based on availability.
+        :param key_pair: The key pair of the infrastructure configuration. You can use this to log on to and debug the instance used to create your image.
+        :param logging: The logging configuration of the infrastructure configuration.
         :param placement: The instance placement settings that define where the instances that are launched from your image will run.
-        :param resource_tags: The tags attached to the resource created by Image Builder.
-        :param security_group_ids: The security group IDs of the infrastructure configuration.
-        :param sns_topic_arn: The Amazon Resource Name (ARN) of the SNS topic for the infrastructure configuration.
-        :param subnet_id: The subnet ID of the infrastructure configuration.
-        :param tags: The tags of the infrastructure configuration.
-        :param terminate_instance_on_failure: The terminate instance on failure configuration of the infrastructure configuration.
+        :param resource_tags: The metadata tags to assign to the Amazon EC2 instance that Image Builder launches during the build process. Tags are formatted as key value pairs.
+        :param security_group_ids: The security group IDs to associate with the instance used to customize your Amazon EC2 AMI.
+        :param sns_topic_arn: The Amazon Resource Name (ARN) for the SNS topic to which we send image build event notifications. .. epigraph:: EC2 Image Builder is unable to send notifications to SNS topics that are encrypted using keys from other accounts. The key that is used to encrypt the SNS topic must reside in the account that the Image Builder service runs under.
+        :param subnet_id: The subnet ID in which to place the instance used to customize your Amazon EC2 AMI.
+        :param tags: The metadata tags to assign to the infrastructure configuration resource that Image Builder creates as output. Tags are formatted as key value pairs.
+        :param terminate_instance_on_failure: The terminate instance on failure setting of the infrastructure configuration. Set to false if you want Image Builder to retain the instance used to configure your AMI if the build or test phase of your workflow fails.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-infrastructureconfiguration.html
         :exampleMetadata: fixture=_generated
@@ -7464,7 +7464,7 @@ class CfnInfrastructureConfigurationProps:
 
     @builtins.property
     def instance_profile_name(self) -> builtins.str:
-        '''The instance profile of the infrastructure configuration.
+        '''The instance profile to associate with the instance used to customize your Amazon EC2 AMI.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-infrastructureconfiguration.html#cfn-imagebuilder-infrastructureconfiguration-instanceprofilename
         '''
@@ -7495,7 +7495,7 @@ class CfnInfrastructureConfigurationProps:
     def instance_metadata_options(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnInfrastructureConfiguration.InstanceMetadataOptionsProperty]]:
-        '''The instance metadata option settings for the infrastructure configuration.
+        '''The instance metadata options that you can set for the HTTP requests that pipeline builds use to launch EC2 build and test instances.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-infrastructureconfiguration.html#cfn-imagebuilder-infrastructureconfiguration-instancemetadataoptions
         '''
@@ -7506,6 +7506,8 @@ class CfnInfrastructureConfigurationProps:
     def instance_types(self) -> typing.Optional[typing.List[builtins.str]]:
         '''The instance types of the infrastructure configuration.
 
+        You can specify one or more instance types to use for this build. The service will pick one of these instance types based on availability.
+
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-infrastructureconfiguration.html#cfn-imagebuilder-infrastructureconfiguration-instancetypes
         '''
         result = self._values.get("instance_types")
@@ -7513,7 +7515,9 @@ class CfnInfrastructureConfigurationProps:
 
     @builtins.property
     def key_pair(self) -> typing.Optional[builtins.str]:
-        '''The Amazon EC2 key pair of the infrastructure configuration.
+        '''The key pair of the infrastructure configuration.
+
+        You can use this to log on to and debug the instance used to create your image.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-infrastructureconfiguration.html#cfn-imagebuilder-infrastructureconfiguration-keypair
         '''
@@ -7524,7 +7528,7 @@ class CfnInfrastructureConfigurationProps:
     def logging(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnInfrastructureConfiguration.LoggingProperty]]:
-        '''The logging configuration defines where Image Builder uploads your logs.
+        '''The logging configuration of the infrastructure configuration.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-infrastructureconfiguration.html#cfn-imagebuilder-infrastructureconfiguration-logging
         '''
@@ -7546,7 +7550,9 @@ class CfnInfrastructureConfigurationProps:
     def resource_tags(
         self,
     ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Mapping[builtins.str, builtins.str]]]:
-        '''The tags attached to the resource created by Image Builder.
+        '''The metadata tags to assign to the Amazon EC2 instance that Image Builder launches during the build process.
+
+        Tags are formatted as key value pairs.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-infrastructureconfiguration.html#cfn-imagebuilder-infrastructureconfiguration-resourcetags
         '''
@@ -7555,7 +7561,7 @@ class CfnInfrastructureConfigurationProps:
 
     @builtins.property
     def security_group_ids(self) -> typing.Optional[typing.List[builtins.str]]:
-        '''The security group IDs of the infrastructure configuration.
+        '''The security group IDs to associate with the instance used to customize your Amazon EC2 AMI.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-infrastructureconfiguration.html#cfn-imagebuilder-infrastructureconfiguration-securitygroupids
         '''
@@ -7564,7 +7570,11 @@ class CfnInfrastructureConfigurationProps:
 
     @builtins.property
     def sns_topic_arn(self) -> typing.Optional[builtins.str]:
-        '''The Amazon Resource Name (ARN) of the SNS topic for the infrastructure configuration.
+        '''The Amazon Resource Name (ARN) for the SNS topic to which we send image build event notifications.
+
+        .. epigraph::
+
+           EC2 Image Builder is unable to send notifications to SNS topics that are encrypted using keys from other accounts. The key that is used to encrypt the SNS topic must reside in the account that the Image Builder service runs under.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-infrastructureconfiguration.html#cfn-imagebuilder-infrastructureconfiguration-snstopicarn
         '''
@@ -7573,7 +7583,7 @@ class CfnInfrastructureConfigurationProps:
 
     @builtins.property
     def subnet_id(self) -> typing.Optional[builtins.str]:
-        '''The subnet ID of the infrastructure configuration.
+        '''The subnet ID in which to place the instance used to customize your Amazon EC2 AMI.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-infrastructureconfiguration.html#cfn-imagebuilder-infrastructureconfiguration-subnetid
         '''
@@ -7582,7 +7592,9 @@ class CfnInfrastructureConfigurationProps:
 
     @builtins.property
     def tags(self) -> typing.Optional[typing.Mapping[builtins.str, builtins.str]]:
-        '''The tags of the infrastructure configuration.
+        '''The metadata tags to assign to the infrastructure configuration resource that Image Builder creates as output.
+
+        Tags are formatted as key value pairs.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-infrastructureconfiguration.html#cfn-imagebuilder-infrastructureconfiguration-tags
         '''
@@ -7593,7 +7605,9 @@ class CfnInfrastructureConfigurationProps:
     def terminate_instance_on_failure(
         self,
     ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
-        '''The terminate instance on failure configuration of the infrastructure configuration.
+        '''The terminate instance on failure setting of the infrastructure configuration.
+
+        Set to false if you want Image Builder to retain the instance used to configure your AMI if the build or test phase of your workflow fails.
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-imagebuilder-infrastructureconfiguration.html#cfn-imagebuilder-infrastructureconfiguration-terminateinstanceonfailure
         '''

aws_cdk/aws_lambda/__init__.py

@@ -11,6 +11,19 @@ fn = lambda_.Function(self, "MyFunction",
 )
 ```
 
+When deployed, this construct creates or updates an existing
+`AWS::Lambda::Function` resource. When updating, AWS CloudFormation calls the
+[UpdateFunctionConfiguration](https://docs.aws.amazon.com/lambda/latest/api/API_UpdateFunctionConfiguration.html)
+and [UpdateFunctionCode](https://docs.aws.amazon.com/lambda/latest/api/API_UpdateFunctionCode.html)
+Lambda APIs under the hood. Because these calls happen sequentially, and
+invocations can happen between these calls, your function may encounter errors
+in the time between the calls. For example, if you update an existing Lambda
+function by removing an environment variable and the code that references that
+environment variable in the same CDK deployment, you may see invocation errors
+related to a missing environment variable. To work around this, you can invoke
+your function against a version or alias by default, rather than the `$LATEST`
+version.
+
 ## Handler Code
 
 The `lambda.Code` class includes static convenience methods for various types of